Court Rules

Privacy Enforcement Tracker

1,634 enforcement actions from 16 federal and state jurisdictions. Every event traced back to its official government source.

1,634

Total Actions

16

Jurisdictions

$49.9B+

Total Fines Tracked

Access this data programmatically:MCP Server API Docs
NYSettlementMultistate

Credit Acceptance Corporation

New York Attorney General Letitia James, leading a bipartisan coalition of 39 other states, the District of Columbia, and Hawaii's Office of Consumer Protection, secured a $700 million settlement from Credit Acceptance Corporation (CAC), a subprime auto lender, resolving allegations of deceptive and abusive lending. The lawsuit alleged CAC pushed tens of thousands of consumers into unaffordable loans with average interest rates above 38 percent, bundled with expensive add-on products consumers were told were mandatory or never told about, causing widespread defaults and vehicle repossessions. Note: this is a consumer-lending enforcement action rather than a privacy matter, so no privacy violation categories from the taxonomy apply.

Critical

$700.0M

NYSettlement

American Family Mutual Insurance Company/Midvale Indemnity Company, Farmers Insurance, Hagerty Insurance Agency, The Hartford Insurance Group, Infinity Insurance Company, Liberty Mutual Insurance, Metromile, State Auto Mutual Insurance Company(American Family)

New York Attorney General Letitia James secured $14.2 million in settlements from eight car insurance companies for failing to protect consumers' personal information. The companies' inadequate cybersecurity allowed hackers to steal driver's license numbers and other data through online quoting tools, impacting over 825,000 New Yorkers. The settlements require the companies to pay penalties and implement enhanced data security measures.

CriticalSecurity FailureData Breach

$14.2M

NYSettlement

Government Employees Insurance Company (GEICO) and The Travelers Indemnity Company(GEICO, Travelers)

GEICO and Travelers were fined $11.3 million for data breaches that exposed personal information of over 120,000 New Yorkers due to inadequate cybersecurity. The breaches involved driver's license numbers being stolen and used in fraudulent unemployment claims. The settlements mandate enhanced security measures and penalties.

CriticalData BreachSecurity Failure

$11.3M

Explore Enforcement Data